Cyberchef: Bug report: AES Encryption

Created on 15 Apr 2020  路  3Comments  路  Source: gchq/CyberChef

Describe the bug
When trying to encrypt a string using AES Encrypt and adding a key (either 16, 24 or 32 bytes) it gives an error. You can see the image I will attach later.

To Reproduce
Steps to reproduce the behaviour or a link to the recipe / input used to cause the bug:

gchq-error

bug

Most helpful comment

Most AES modes require a non-empty initialisation vector to be considered secure, the exception to that is ECB mode since it doesn't intermix the output of a block with the next plaintext block.

image

CBC(the mode in this case) does intermix the plaintext block with the output of the previous encrypted block. Hence, to initiate this process for the first plaintext block, an additional input value is required to be mixed with the first block, which is referred to as an initialisation vector(IV).

image

All 3 comments

Changing all the zeros for other characters makes the same error.

Most AES modes require a non-empty initialisation vector to be considered secure, the exception to that is ECB mode since it doesn't intermix the output of a block with the next plaintext block.

image

CBC(the mode in this case) does intermix the plaintext block with the output of the previous encrypted block. Hence, to initiate this process for the first plaintext block, an additional input value is required to be mixed with the first block, which is referred to as an initialisation vector(IV).

image

Both AES encrypt and decrypt operations state the following;

The Initialization Vector should be 16 bytes long. If not entered, it will default to 16 null bytes.

Since it does not default to 16 bytes long when left empty the above text should be modified to reflect this updated requirement.

Was this page helpful?
0 / 5 - 0 ratings